Migrate to REUSE.toml and update GitHub Actions

.github/PULL_REQUEST_TEMPLATE.md

@@ -1,4 +0,0 @@
-## Description
-<!--
-Please describe what this PR do.
- -->

.github/workflows/publish-release.yml

@@ -11,7 +11,7 @@ jobs:
   update-changelog:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v7
       with:
         fetch-depth: 0
     - name: Get Release
@@ -45,7 +45,7 @@ jobs:
         git add CHANGELOG.md pyproject.toml
         git commit -m "Update ChangeLog"
     - name: Push changes
-      uses: ad-m/github-push-action@master
+      uses: ad-m/github-push-action@v1.3.0
       with:
         github_token: ${{ secrets.TOKEN }}
         branch: main
@@ -54,11 +54,11 @@ jobs:
     runs-on: ubuntu-latest
     needs: update-changelog
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v7
       with:
         ref: main
     - name: Set up Python
-      uses: actions/setup-python@v2
+      uses: actions/setup-python@v6
       with:
         python-version: '3.11'
     - name: Install dependencies

.github/workflows/pull-request.yml

@@ -18,9 +18,9 @@ jobs:
       matrix:
         python-version: [3.11, 3.14]
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v7
     - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v6
       with:
         python-version: ${{ matrix.python-version }}
     - name: Install dependencies
@@ -34,6 +34,6 @@ jobs:
   reuse:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v7
     - name: REUSE Compliance Check
-      uses: fsfe/reuse-action@v1
+      uses: fsfe/reuse-action@v6

.github/workflows/release-drafter-config.yml

@@ -7,7 +7,7 @@ jobs:
   update_release_draft:
     runs-on: ubuntu-latest
     steps:
-      - uses: release-drafter/release-drafter@v5
+      - uses: release-drafter/release-drafter@v7
         with:
           config-name: release-drafter-config.yml
         env:

REUSE.toml

@@ -0,0 +1,59 @@
+version = 1
+SPDX-PackageName = "FOSSLight Android"
+SPDX-PackageDownloadLocation = "https://github.com/fosslight/fosslight_android_scanner"
+
+[[annotations]]
+path = "pyproject.toml"
+SPDX-FileCopyrightText = "2023 LG Electronics Inc."
+SPDX-License-Identifier = "Apache-2.0"
+
+[[annotations]]
+path = "**.md"
+SPDX-FileCopyrightText = "2023 LG Electronics"
+SPDX-License-Identifier = "Apache-2.0"
+
+[[annotations]]
+path = "test/**"
+precedence = "override"
+SPDX-FileCopyrightText = "2023 LG Electronics"
+SPDX-License-Identifier = "Apache-2.0"
+
+[[annotations]]
+path = ".github/**"
+SPDX-FileCopyrightText = "2023 LG Electronics"
+SPDX-License-Identifier = "Apache-2.0"
+
+[[annotations]]
+path = "MANIFEST.in"
+SPDX-FileCopyrightText = "2023 LG Electronics"
+SPDX-License-Identifier = "Apache-2.0"
+
+[[annotations]]
+path = "requirements**.txt"
+SPDX-FileCopyrightText = "2023 LG Electronics"
+SPDX-License-Identifier = "Apache-2.0"
+
+[[annotations]]
+path = ".gitignore"
+SPDX-FileCopyrightText = "2023 LG Electronics"
+SPDX-License-Identifier = "Apache-2.0"
+
+[[annotations]]
+path = "src/fosslight_android/resources/**"
+SPDX-FileCopyrightText = "2023 LG Electronics"
+SPDX-License-Identifier = "Apache-2.0"
+
+[[annotations]]
+path = "script/generate-notice-files.py"
+SPDX-FileCopyrightText = "2012 The Android Open Source Project"
+SPDX-License-Identifier = "Apache-2.0"
+
+[[annotations]]
+path = "tox.ini"
+SPDX-FileCopyrightText = "2023 LG Electronics"
+SPDX-License-Identifier = "Apache-2.0"
+
+[[annotations]]
+path = ".coderabbit.yaml"
+SPDX-FileCopyrightText = "2026 LG Electronics"
+SPDX-License-Identifier = "Apache-2.0"